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Abstract 

We present a straightforward embedding of quantified multimodal logic in simple type theory 
and prove its soundness and completeness. Modal operators are replaced by quantification 
over a type of possible worlds. We present simple experiments, using existing higher-order 
theorem provers, to demonstrate that the embedding allows automated proofs of statements 
in these logics, as well as meta properties of them. 
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1 Motivation 

There are two approaches to automate reasoning in modal logics. The direct approach [7, 33] 
develops specific calculi and tools for the task; the translational approach [35, 36] transforms 
modal logic formulas into first-order logic and applies standard first-order tools. 

In previous work [10, 8, 11] we have picked up and extended the embedding of multimodal 
logics in simple type theory as proposed by Brown [16]. The starting point is a characterization 
of multimodal logic formulas as particular A-terms in simple type theory. A characteristic of the 
encoding is that the definiens of the O r operator A-abstracts over the accessibility relation r. We 
have proved that this encoding is sound and complete [8, 11] and we have illustrated that this 
encoding supports the formulation of meta properties of encoded multimodal logics such as the 
correspondence between certain axioms and properties of the accessibility relation [10]. Some of 
these meta properties can even be effectively automated within our higher-order theorem prover 
LEO-II [13]. 

In this paper we extend our previous work to quantified multimodal logics. Multimodal log- 
ics with quantification for propositional variables have been studied by others before, including 
Kripke [30], Bull [17], Fine [19, 20], Kaplan [28], and Kremer [29]. Also first-order modal logics 
[23, 26] have been studied in numerous publications. We are interested here in multimodal logics 
with quantification over both propositional and first-order variables, a combination investigated, 
for example, by Fitting [21]. In contrast to Fitting we here pursue the translational approach and 
study the embedding of quantified multimodal logic in simple type theory. This approach has 
several advantages: 

• The syntax and semantics of simple type theory is well understood [1, 2, 9, 25]. Studying 
(quantified) multimodal logics as fragments of simple type theory can thus help to better 
understand semantical issues. 

• For simple type theory, various automated proof tools are available, including Isabelle/HOL 
[34], HOL [24], LEO-II [13], and TPS [5]. Employing the transformation presented in this 
paper, these systems become immediately applicable to quantified multimodal logics or 
fragments of them. 

• Even meta properties of quantified modal logics can be formalized and mechanically ana- 
lyzed within these pro vers. 

• The systematic study of embeddings of multimodal logics in simple type theory can identify 
fragments of simple type theory that have interesting computational properties (such as 
the detection of the guarded fragment). This can foster improvements to proof tactics in 
interactive proof assistants. 

Our paper is organized as follows. In Section 2 we briefly review simple type theory and adapt 
Fitting's [21] notion of quantified multimodal logics. In Section 3 we extend our previous work 
[8, 10, 11] and present an embedding of quantified multimodal logic in simple type theory. This 
embedding is shown sound and complete in Section 4. In Section 5 we present some simple 
experiments with the automated theorem provers LEO-II, TPS, and IsabelleP and the model finder 
IsabelleM. These experiments exploit the new TPTP THF infrastructure [12]. 
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2 Preliminaries 

2.1 Simple Type Theory 

Classical higher-order logic or simple type theory STT [3, 18] is built on top of the simply 
typed A-calculus. The set T of simple types is usually freely generated from a set of basic types 
{o, l} (where o is the type of Booleans and i is the type of individuals) using the function type 
constructor Instead of {o, l} we here consider a set of base types {o, l, p}, providing an 
additional base type p (the type of possible worlds). 

The simple type theory language STT is defined by (a, ft G T): 

s,t ::= p a | X a | (XX a .sp) a ^p \ (s a ^pt a )p \ (-^ ^ s ) \ 

(So Vo-t(no to)o I \Sa a^a^o ta)o \ \^-{a-*o)-*o Sq->o)o 

p a denotes typed constants and X a typed variables (distinct from p a ). Complex typed terms are 
constructed via abstraction and application. Our logical connectives of choice are -i _> , V ^ ^ , 
= a ^a^o and I1( Q ^ )^ (for each type a). From these connectives, other logical connectives can be 
defined in the usual way. We often use binder notation VX Q . s for ri( Q _ +0 )_» (AX Q . s ). We denote 
substitution of a term A a for a variable X a in a term by [A/X]i?. Since we consider en- 
conversion implicitly, we assume the bound variables of B avoid variable capture. Two common 
relations on terms are given by /9-reduction and ^-reduction. A /3-redex has the form (XX.s)t 
and /5-reduces to [t/X]s. An ^-redex has the form (XX. sX) where variable X is not free in s; it 
7/-reduces to s. We write s —p t to mean s can be converted to t by a series of /9-reductions and 
expansions. Similarly, s —p v t means s can be converted to t using both f3 and rj. For each s G L 
there is a unique (3 -normal form and a unique (3r]-normal form. 

The semantics of 5TT is well understood and thoroughly documented in the literature [1,2, 
9, 25]; our summary below is adapted from Andrews [4]. 

A frame is a collection {D a } a er of nonempty sets D a , such that D Q = {T, F} (for truth 
and falsehood). The D a ^p are collections of functions mapping D a into Dp. The members 
of D L are called individuals. An interpretation is a tuple ({D a } Qe T, -0 where function 7 maps 
each typed constant c a to an appropriate element of D a , which is called the denotation of c a 
(the logical symbols -i, V, IP, and = a ^ a ^o are always given the standard denotations). A 
variable assignment (f) maps variables X a to elements in D a . An interpretation ({D a } a er, I) 
is a Henkin model (equivalently, a general model) if and only if there is a binary function V 
such that Vcf, s a G -D Q for each variable assignment and term s a G and the following 
conditions are satisfied for all and all s,t G L: (a) V^,X a = 4>X a , (b) V^J9q, = Ip a , (c) 
V^(sQ,^/3t Q ) = (V^s Q _ >J g)(V^,t Q ), and (d) V^(AX a .^) is that function from D a into Dp whose 
value for each argument z G D a is V[ z /x a ]<f>sp, where [z/ X a }4> is that variable assignment such 
that ([z/Xa]<p)X a = z and ([z / X a \(t>)Yp = <f)Yp if Yp ^ X Q . (Since /V, in, and 1= always 
denote the standard truth functions, we have (-is) = T if and only ifV ( ps = F, V ( p(s\/t) = T 
if and only if s = T or t = T, V (VX a . s ) = (n a (AX Q . s G )) = T if and only if for all 
z £ D a we have V[ z /x a ]</> s = T, and V ( p(s = t) = T if and only if s = t. Moreover, we 
have s = t whenever s =p v t.) It is easy to verify that Henkin models obey the rule that 
everything denotes, that is, each term t a always has a denotation V<j> t a G D a . If an interpretation 
{{D a }aer, -0 is a Henkin model, then the function is uniquely determined. 

We say that formula A G lis valid in a model ({D a } ae <r, I) if and only if V^A = T for 
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every variable assignment 0. A model for a set of formulas H is a model in which each formula 
of H is valid. A formula A is Henkin-valid if and only if A is valid in every Henkin model. We 
write |= <srr A if A is Henkin-valid. 



2.2 Quantified Multimodal Logic 

First-order quantification can be constant domain or varying domain. Below we only consider 
the constant domain case: every possible world has the same domain. We adapt the presentation 
of syntax and semantics of quantified modal logic from Fitting [21]. In contrast to Fitting we are 
not interested in S5 structures but in the more general case of K. 

Let XV be a set of first-order (individual) variables, VV a set of propositional variables, and 
SyAA a set of predicate symbols of any arity. Like Fitting, we keep our definitions simple by 
not having function or constant symbols. While Fitting [21] studies quantified monomodal logic, 
we are interested in quantified multimodal logic. Hence, we introduce multiple D r operators for 
symbols r from an index set S. The grammar for our quantified multimodal logic QM.C is thus 

s,t ::= P | k(X\...,X n ) | -is | s V t | VX.s | VP.s | D r s 

where P eVV,ke SyM, and X, X { e TV. 

Further connectives, quantifiers, and modal operators can be defined as usual. We also obey 
the usual definitions of free variable occurrences and substitutions. 

Fitting introduces three different notions of semantics: QS57r~, QS57T, and QS57r + . We 
study related notions QK7r , QK7r, and QK7r + for a modal context K, and we support multiple 
modalities. 

A QK7T" model is a structure M = (W, (R r ) rG s, D, P, (Iw)wew) such that (W, (R r ) re s) is a 
multimodal frame (that is, W is the set of possible worlds and the R r are accessibility relations 
between worlds in W), D is a non-empty set (the first-order domain), P is a non-empty collection 
of subsets of W (the propositional domain), and the I w are interpretation functions mapping each 
n-place relation symbol k G SyM. to some n-place relation on D in world w. 

A variable assignment g = (g iV , g pv ) is a pair of maps g m : XV — ► D and g pv : VV — ► P, 
where g lv maps each individual variable in TV to a an object in D and g pv maps each propositional 
variable in VV to a set of worlds in P. 

Validity of a formula s for a model M = (W, (R r ) re s, D, P, I w ), a world w E W, and a 
variable assignment g = (g lv , g pv ) is denoted as M, g, w \= s and defined as follows, where 
[a/Z]g denotes the assignment identical to g except that ([a/ Z]g)(Z) = a: 
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M,g,w\=k{X\...,X n ) ifandonlyif (g iv (X 1 ), g iv (X n )) G I w (k) 

M,g,w^ P if and only if w G g pv (P) 

M, g, w \= —i p if and only if M, g, w Y= p 

M, g,w \= p V q if and only if M, g,w |= p or M, g, w |= q 

M,g,w^ VX p if and only if M, ([d/X]g iv , g pv ),w \= p for all d G D 

M,g,w^ Vg. p if and only if M, (g iv , [v/Q]g pv ), w ^ p fox al\v e P 

M : g,w \= O r p if and only if M, g,v |= p for allv eW 

with (w,v) E R r 



A QK7T - model M = (W, (R r ) re s, D, P, (I w ) we w) is a QK7r model if for every variable 
assignment g and every formula s G QMC, the set of worlds {w <E W \ M, g,w \= s} is a 
member of P. 

A QK7r model M = (W, (R r ) re s, D, P, (I w ) w ew) is a QK7r + model if every world w £ W 
is member of an atom in P. The atoms of P are minimal non-empty elements of P: no proper 
subsets of an atom are also elements of P. 

A QM.C formula s is valid in model M for world w if M,g,w |= s for all variable as- 
signments g. A formula s is va/z'J in model M if M, g, w |= s for all <? and u>. Formula s is 
QK7r-va/z'<i if s is valid in all QK7r models, when we write |=Q K7r S ; we define QK7r _ -valid and 
QK7r + -valid analogously. 

In the remainder we mainly focus on QK7r models. These models naturally correspond to 
Henkin models, as we shall see in Sect.4. 
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3 Embedding Quantified Multimodal Logic in STT 



The idea of the encoding is simple. We choose type i to denote the (non-empty) set of individ- 
uals and we reserve a second base type ji to denote the (non-empty) set of possible worlds. The 
type o denotes the set of truth values. Certain formulas of type [i o then correspond to multi- 
modal logic expressions. The multimodal connectives -i , V , and □ , become A-terms of types 

(// -> o) -> (fj, -> o), (// o) o) ->• (/i -> o), and (// -> // -> o) -> (/x -> o) -> (/x -> o) re- 

spectively. 

Quantification is handled as usual in higher-order logic by modeling VX.p as n(AX.p) for 
a suitably chosen connective n, as we remarked in Section 2. Here we are interested in defining 
two particular modal II-connectives: 11', for quantification over individual variables, and n M_> °, 
for quantification over modal propositional variables that depend on worlds, of types (l (fj, -> 
o) )->(//-> o) and ((//-> o) -> (// -> o)) -> (/x -> o), respectively. 

In previous work [10] we have discussed first-order and higher-order modal logic, including 
a means of explicitly excluding terms of certain types. The idea was that no proper subterm of 
t^ should introduce a dependency on worlds. Here we skip this restriction. This leads to a 
simpler definition of a quantified multimodal language QM.C STT below, and it does not affect 
our soundness and completeness results. 

Definition 3.1 (Modal operators) 

The modal operators -i , V , □, IT, and TP"" are defined as follows: 




V (;u-»o)->(m->o)->(m->o; 
(/H-+jli->o)->(/i->o)->(/i-><? 



1 (/i->o)->(/i->0^ 



\<t>^ .\W^{(f>W) 

\<t*^ .\ii>^ .\w ll .<t>wvi>w 

XR^o. A0^ o . XW^W^R W V) V V 
X^^.XW^X^XW 

XW^P^PW 



Further operators can be introduced, for example, 



t (^o)^(^o) =yp^ -p v -iP 



-L(^- )-(^ ) = -< T 
A Ox-KO-Oi-x,)-^-*,) = A0 M ^ o .A^ o .-i (-10 V -1^) 

3 (/x-K>)-»(/i-vo)->(/i-vo) = A0 M ^ O . Xlp^o. -i V "0 

O (^^o)^(^o)^(^o) = XR^^ .X4>^ .-\ (□ i? (-i 0)) 



Smh),(H = A0 M ^ o) .-,(ir(AX t .^(0X))) 

£f ( ;: oM ^ 0)M ^ 0) = A0^ o) .^ o) .-(n^(AP^.-(0P))) 



We could also introduce further modal operators, such as the difference modality D, the global 
modality E, nominals with !, or the @ operator (consider the recent work of Kaminski and Smolka 
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[27] in the propositional hybrid logic context; they also adopt a higher-order perspective): 

D(^o)^o) = X^.XW^.W ± V A <f>V 
E(^o)^{^o) = A0 M ^ O .0 V D<fi 
!(m-»o)-»(m-»o) = A0^ o .P(0 A -i(D<j))) 

This illustrates the potential of our embedding for encoding quantified hybrid logic, an issue that 
we might explore in future work. 

For defining QM £ STT -propositions we fix a set XV STT of individual variables of type u, a set 
W STT of propositional variables of type /j, -> o, and a set SyM STT of /c-ary (curried) predicate 
constants of types £-».„->•<, ->■(// -> o). The latter types will be abbreviated as t n -> (/i -> o) in 

n 

the remainder. Moreover, we fix a set l S s " rT of accessibility relation constants of type -> fx -> o. 

Definition 3.2 /^^-propositions) QA^ ^^-propositions are defined as the smallest set 
of simply typed A-terms for which the following hold: 

• Each variable P^ Q G VV STT is an atomic QAl£ 5TT -proposition, and if Xf G 1V STT (for 
j = 1, . . . , n) and A>^( M ^ ) G SyM STT , then the term (/cX 1 ... X n )^ is an atomic 
Q.M £ 5TT -propo sition . 

• If and ip are Q7Vl£ 5TT -propositions, then so are — i and V ip. 

• If r^n-to G <S 5TT is an accessibility relation constant and if is an Q7W£ 5TT -proposition, 
then □ r is a QM.C T -proposition. 

• If X L G 1V STT is an individual variable and is a Q.M /^^-proposition then IT(AX t .0) 
is a Q.M /^^-proposition. 

• If P^o £ W STT is a propositional variable and is a Q.M £ 5TT -proposition then 
IP^°(AP^ o .0) is a QAl£ 5TT -proposition. 

We write D r 0, VX t .0, and VP M ^ o .0 for □ r 0, IT(AX t .0), and n M " >o (AP M _ >o .0), respectively. 

Because the defining equations in Definition 3.1 are themselves formulas in simple type theory, 
we can express proof problems in a higher-order theorem prover elegantly in the syntax of quan- 
tified multimodal logic. Using rewriting or definition expanding, we can reduce these representa- 
tions to corresponding statements containing only the basic connectives -i , V , =, IT, and IP - * 
of simple type theory. 



Example 3.3 The following QMC STT proof problem expresses that in all accessible worlds 
there exists truth: 

□ 3P P 

'r — s± [j,—>o m 1 

The term rewrites into the following /^-normal term of type fj, o 

XW^Y^rWY) V (^-.(py)) 
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Next, we define validity of QMC propositions <f)^ in the obvious way: a QM. ^-proposition 
4>^o is valid if and only if for all possible worlds we have e 4>^ , that is, if and only if 
4>^ Wf, holds. 

Definition 3.4 (Validity) 

Validity is modeled as an abbreviation for the following simply typed A-term: 

valid = X^^VW^W 

Example 3.5 We analyze whether the proposition U r 3P^ Q . P is valid or not. For this, we 
formalize the following proof problem 

valid (n r 3P^ . P) 

Expanding this term leads to 

VW^.VY^rWY) V (^X^ .^(XY)) 
It is easy to check that this term is valid in Henkin semantics: put X = AF M . T. 

An obvious question is whether the notion of quantified multimodal logics we obtain via this 
embedding indeed exhibits the desired properties. In the next section, we prove soundness and 
completeness for a mapping of QM /^-propositions to Q-M/^^-propositions. 
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4 Soundness and Completeness of the Embedding 

In our soundness proof, we exploit the following mapping of QK7r models into Henkin models. 
We assume that the QM.C logic L under consideration is constructed as outlined in Section 2 
from a set of individual variables XV, a set of propositional variables PV, and a set of predicate 
symbols SyM. Let D r i , . . . , D r n for r l G S be the box operators of L. 

Definition 4.1 (Q7W£ 5TT logic L STT for logic L) 

Given an Q.M£ logic L, define a mapping 1 as follows: 

X = X L for every X G XV 
P = P M ^ for every P G PV 
k = k^^(^ ) for n-ary fc G S^-M 
r = r^^o for every r G 5 

The Q.M£ 5TT logic L 5rr is obtained from L by applying Def. 3.2 with XV 5TT = {X | X G 
XV}, VV STT = {P\P G PV}, SXM STT = {A; | fc G SyM}, and 5 5TT = {f | r G 5}. Our 
construction obviously induces a one-to-one correspondence 1 between languages L and L STT . 

Moreover, let g = (g w : XV — > D, g pv : VV — ► P) be a variable assignment for L. We 
define the corresponding variable assignment 

g = (g iv : TV STT — > D = D L) «T : VV STT — > P = D^ ) 

for L 5rr so that g{X L ) = g(X) = g(X) and g(P^ Q ) = g(P) = g(P) for all X t G 1V STT and 
P^o G PV 5TT . 

Finally, a variable assignment g is lifted to an assignment for variables Z a of arbitrary type 
by choosing g(Z a ) = d G D a arbitrarily, if a ^ l, ji -> o. 



We assume below that L, L b , g and g are defined as above. 
Definition 4.2 (Henkin model H Q for QKvr model Q) 

Given a QK7r model Q = (W, (R r ) re s, D, P, (I w ) we w) for L, a Henkin model H Q = ({D a } ae r, I) 
for L srr is constructed as follows. We choose 

• the set as the set of possible worlds W, 

• the set D L as the set of individuals D (cf. definition of g w ), 

• the set D^ as the set of sets of possible worlds P (cf. definition of g pv ), 1 

• the set D^n^o as the set of relations (R r ) reS , 

• and all other sets -D a ->/3 as (not necessarily full) sets of functions from D a to Dp; for all 
sets D a ^f3 the rule that everything denotes must be obeyed, in particular, we require that 
the sets Pv^( M ^ ) contain the elements /Av^(^ ) as characterized below. 

'To keep things simple, we identify sets with their characteristic functions. 
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The interpretation / is as follows: 

• Let fc t n^(^ ) = k for k G SD-'.M and let X* = X* for X* G XV. We choose Ik^^^ G 
D L n^^ o) such that 

(/A;)(^(X i 1 ) ) ...^(Xr) )W )=T 

for all worlds w E such that Q,g,w \= k(X 1 , . . . , X n ); that is, if 

^(X 1 ), . . . ,^(X-)) G /„,(*)• Otherwise (Ik)(g(Xl), . . .,g{X?),w) = F . 

• Let r^^ = r for r £ S. We choose Ir^^ Q G D^^ Q such that (Ir^^^w, w') = T 
if (w, w') e R r inQ and (7r j[1 ^. /1 _ >0 )(iu, «/) = F otherwise. 

It is not hard to verify that iJ Q = ({D a } Q6 T, -0 is a Henkin model. 

Lemma 4.3 

LetQ = (W, (R r ) re s, D, P, (I w )wew) be a QK7r model and let H Q = ({D a } ae r, I) be a Henkin 
model for Q. Furthermore, let s^ Q = sfor s G L. 

Then for all worlds w G W and variable assignments g we have Q,g,w \= s in Q if and only if 

V[t»/w M ]fl (s^oWp) = T in H Q . 

Proof: The proof is by induction on the structure of s G L. 

Let s = P for P G VV. By construction of Henkin model H Q and by definition of g, we 
have for P^ Q = P that V [w/W ^ g (P^ W^) = g(P^ ){w) = T if and only if Q,g,w\= P, that 
is, w G g{P). 

Let s = k(X\ X n ) for k G SyM and X' 1 G IV. By construction of Henkin model H Q 
and by definition of g, we have for k(X l , . . . , X n ) = (Av^^o) X} ... X") that 

V [W ^ ((fc^o-o)^ 1 . . . X t «) wg = (/ fc)($PO, . . . , g{X:),w) = T 

if and only if Q, g, w |= k{X\ X"), that is, (^(X 1 ), . . . , g{X n )) G I w {k). 

Let s = -it for t G L. We have Q,g,w |= -is if and only Q,g,w \/= s, which is 
equivalent by induction to V^^W,,) = F and hence to V [w /^]g -"(i/z-o W M ) =p r , 

V[w/W^]g ((-" i^o) W^) = T - 

Let s — (t V I) for t, / G L. We have Q,g,w |= (i V /) if and only if Q,g,w |= t 
or Q,g,w \= I. The latter condition is equivalent by induction to V\ w /Wu]g (V->° ^m) = X or 
MtB/wja (Z^ W^) = T and therefore to V[ w /w„]g ( V«> W„) V (l^ =p v V[ w / Wlt ]g (t^ V 
l^ W,) = T. 

Let s = D r t for t E L. We have Q, 5, u> |= D r t if and only if for all u with (w, u) G R r 
we have Q,g,u \= t. The latter condition is equivalent by induction to this one: for all u with 
{w, u) G R r we have V[ u /y (t^ Q V^) = T. That is equivalent to 

Vlu/VJlw/WJg HW-° W V Vim) V (*(h« ^)) = T 

and thus to 

v [W w^ (v%. (-.(v^ w„ >g v (t^ =fr v [w/WlAg (n r t wg = t. 
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Let s = VX.t for t G L and X G XV. We have Q,g,w |= VX. t if and only 
if Q, [d/X]g,w \= t for all d G D. The latter condition is equivalent by induc- 
tion to V[d/x,][w/w^]g (t^oW^) = T for all d G D b . That condition is equivalent to 

v [w/w ,]g (n^ oHo (Ax^ wg) =fin v [w/w ^ ((xv,. (n^ oHo (xx L .t^ v,))) wg = 

T and so by definition of 11' to V[ w /w^]g ((n^^^^^ 

v lw/WM «yx„ t^ )w,) = T. 

The case for s = VP. t where t G L and P G PV is analogous to s = VX. t. □ 
We exploit this result to prove the soundness of our embedding. 

Theorem 4.4 (Soundness for QK7r semantics) Let s G L be a QMC proposition and let 
s^ = s be the corresponding QMC STT proposition. If\= srr (valid s^o) then |=Q K7r s. 

Proof: By contraposition, assume |^Q K7r s: that is, there is a QK7r model Q = 
(W : (R r ) r( zs, D, P, (I w ) we w), a variable assignment g and a world w G W, such that Q,g,w ty= s. 
By Lemma 4.3, we have V^/w^g (s^oW^) = F in a Henkin model H Q for Q. Thus, 
V d (VW^.(s^ W)) = Pn V^valids^) = P. Hence, ^ srr (valid v+ ). □ 

In order to prove completeness, we reverse our mapping from Henkin models to QK7r models. 

Definition 4.5 {QMC logic L QMC for QMC STT logic L) The mapping I is defined as the re- 
verse map of 1 from Def. 4.1. 

The QMC logic L QMC is obtained from QMC STT logic L by choosing XV = {X L \ X L G 

XV 5TT }, PV = {P^o I P^o G PV 5TT }, = {k^(^o I fc t n^(^ 0) G 5^-M 5TT }, and 

Q — Jr I r (= <?STTt. 

Moreover, let g : XV U PV — > P U P be a variable assignment for P The cor- 
responding variable assignment (7 : XV U PV — > P U P for L QMC is defined as follows: 
= £(X t ) = <?(X) and #(P) = g(P^ ) = g(P^ ) for all X G XV and P G PV. 

We assume below that L, L QMC , g and g are defined as above. 

Definition 4.6 (QK7r~ model Q H for Henkin model P) Given a Henkin model 

# = ({D a } aeT ,I} for Q.M£ 5TT logic L, we construct a Q.M£ model Q H = 

(W,(Rr) reS ,D,P,(I w ) weW ) for L QMC by choosing IV = P M , P = P t , P = P^ 2 , 
and (R r )res — D^^o- Let A; = k L n^( p ^ ) and let X* = X*. We choose I w (k) such that 
(^(X 1 ), . . . , g(X n )) G P(A;) if and only if 

(Ik)(g(Xl),...,g(X:),w)=T. 

Finally, let r = f^^ . We choose R r such that (w, w') G P r if and only if (Ir^^ )(w, w') = 
T. 

It is not hard to verify that Q H = (W, (R r ) re s, D, P, (I w ) we w) meets the definition of QK/T 
models. Below we will see that it also meets the definition of QK7r models. 



2 Again, we identify sets with their characteristic functions. 
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Lemma 4.7 Let Q H = (W, (R r ) re s, D, P, (I w ) w ew) be a QK7r model for a given Henkin 
model H = ({D a } a£ r, I)- Furthermore, let s = s^ Q . 

For all worlds w G W and variable assignments g we have V^/w^g (v»^) = T in H if 
and only ifQ H , g,w \= s in Q H . 

Proof: The proof is by induction on the structure of s^ Q G L and it is analogous to the proof 
of Lemma 4.3. 

□ 

With the help of Lemma 4.7, we now show that the QK7T" models we construct in Def. 4.6 
are in fact always QK7r models. Thus, Henkin models never relate to QK7r models that do not 
already fulfill the QK7r criterion. 

Lemma 4.8 Let Q H = (W, (R r ) r£ s, D, P, (I w ) w ew) be a QK7r~ model for a given Henkin 
model H = ({D a } ae <r, I). Then Q H is also a QKtt model. 

Proof: We need to show that for every variable assignment g and formula s = s^ Q the set 
{w G W | Q h ,g,w \= s} is a member of P in Q H . This is a consequence of the rule that 
everything denotes in the Henkin model H. To see this, consider V g s^ = V g (XV fl .s lJl ^ V) 
for variable not occurring free in s^g. By definition of Henkin models this denotes that 
function from = W to truth values D Q = {T, F} whose value for each argument w G 
is V[w/Vf,] g ( s V), that is, s^ Q denotes the characteristic function \w G W.V[ w /v] g (s^ Vn) — T 
which we identify with the set {w G W | V^/y ] s (s^ Vp) = T}. Hence, we have {w G W \ 
V[ w /y M ] 9 (s^oV^) = T} G D^ Q . By the choice of P = D^ Q in the construction of Q H we know 
{w G W | V [w/V ,] g (s^oVn) =T}eP. By Lemma 4.7 we get {w G W \ Q h , g, w [= s} G P. 

□ 

Theorem 4.9 (Completeness for QK7r models) Let s^ Q be a QMC STT proposition and let 
s = Sp-to be the corresponding QM.C proposition. lf^=Q Kn § then \= STT {valid s M _> ). 

Proof: By contraposition, assume $= srr (valid s^ ): there is a Henkin model H = 
{{D a }aer, I) and a variables assignment g such that V g (valid s^ ) = F. Hence, for some 
world w G Dp we have V[ w /w^]g {s^cW^) = F. By Lemma 4.7 we then get Q H , g, w \/=Q KlT s 
for s = s M _» D in QK7r model Q H for H. By Lemma 4.8 we know that Q H is actually a QK7r 
model. Hence, ^ QK7r s. Box 

Our soundness and completeness results obviously also apply to fragments of QM.C logics. 

Corollary 4.10 The reduction of our embedding to propositional quantified multimodal logics 
(which only allow quantification over propositional variables) is sound and complete. 

Corollary 4.11 The reduction of our embedding to first-order multimodal logics (which only 
allow quantification over individual variables) is sound and complete. 

Corollary 4.12 The reduction of our embedding to propositional multimodal logics (no quantifi- 
cation) is sound and complete. 
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5 Applying the Embedding in Practice 

In this section, we illustrate the practical benefits of our embedding with the help of some simple 
experiments. We employ off-the-shelf automated higher theorem pro vers and model generators 
for simple type theory to solve problems in quantified multimodal logic. Future work includes 
the encoding of a whole library of problems for quantified multimodal logics and the systematic 
evaluation of the strengths of these provers to reason about them. 

In our case studies, we have employed the simple type theory automated reasoners LEO-II, 
TPS [5], IsabelleM and IsabelleP. 3 These systems are available online via the SystemOnTPTP 
tool and they exploit the new TPTP infrastructure for typed higher-order logic [12]. 

The formalization of the modal operators (Def. 4.1) and the notion of validity (Def. 3.4) in 
THF syntax [12] is presented in Appendix A. As secured by the theoretical results of this paper, 
these few lines of definitions are all we need to make simple type theory reasoners applicable to 
quantified multimodal logic. 

If we call the theorem provers LEO-II and IsabelleP with this file, then they try to find a 
refutation from these equations: they try to prove their inconsistency. As expected, none of the 
systems reports success. The model finder IsabelleM, however, answers in 0.6 seconds that a 
model has been found. IsabelleM employs the SAT solver zChaff. 

When applying our systems to Example 3.5, we get the following results (where +/t repre- 
sents that a proof has been found in t seconds and — ft reports that no proof has been found within 
t seconds): IsabelleP: +/1.0, LEO-II: +/0.0, TPS: +/0.3. IsabelleM does not find a model (this 
also holds for the examples below). 

We also tried the Barcan formula and its converse: 

BF : valid (VX t . U r (p^ o) X)) D (D r VX t . (p^ o) X)) 
BF- 1 : valid (D r VX, (p^ o) X)) D (VX t . D r (p L< ^ o) X)) 

The results for BF and BF' 1 are IsabelleP: +/0.7, LEO-II and LEO-IIP: +/0.0, TPS: +/0.2. 
This confirms that our first-order quantification is constant domain. 

The next example analyzes the equivalence of two quantified multimodal logic formula schemes 
(which can be read as "if it is possible for everything to be P, then everything is potentially P "): 

(valid (O r VX,(P1)) D (VX,O fi (PX))) 

(valid U R (PX)) D (D R 3X L .(PX))) 

The results are: IsabelleP: +/2.0, LEO-II: +/0.0, TPS:+/0.2. 



3 IsabelleM is a model finder in Isabelle that has been made available in batch mode, while IsabelleP applies a 
series of Isabelle proof tactics in batch mode. 
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An interesting meta property is the correspondence between axiom 

valid VP^ ( ^ o) . (<>< P) D n k O t P 
and the k, /)-confluence property: 

VA^B^VC^idiAB) A (kAC)) 3D^.((j B D) A (I CD))) 

The results are: IsabelleP: +/3.7, LEO-II: +/0.3, TPS:+/0.2. The problem encoding is presented 
in Appendix C. 

Future work will investigate how well this approach scales for more challenging problems. We 
therefore invite potential users to encode their problems in the THF syntax and to submit them to 
the THF TPTP library. 
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6 Conclusion 

We have presented a straightforward embedding of quantified multimodal logics in simple type 
theory and we have shown that this embedding is sound and complete for QK7r semantics. This 
entails further soundness and completeness results of our embedding for fragments of quantified 
multimodal logics. We have formally explored the natural correspondence between QK7r models 
and Henkin models and we have shown that the weaker QK7r models do not enjoy such a 
correspondence. 

Non-quantified and quantified (normal) multimodal logics can thus be uniformly seen as nat- 
ural fragments of simple type theory and their semantics (except some weak notions such as 
QK7r models) can be studied from the perspective of the well understood semantics of simple 
type theory. Vice versa, via our embedding we can characterize some computationally interest- 
ing fragments of simple type theory, which in turn may lead to some powerful proof tactics for 
higher-order proof assistants. 

Future work includes further extensions of our embedding to also cover quantified hybrid 
logics [14, 15] and full higher-order modal logics [22, 31]. A first suggestion in direction of 
higher-order modal logics has already been made [10]. This proposal does however not yet ad- 
dress intensionality aspects. However, combining this proposal with non-extensional notions of 
models for simple type theory [9, 32] appears a promising direction. 
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A THF Formalization of Quantified Multi-Modal Logic in 
Simple Type Theory 
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Quantified multimodal logic 
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Version 
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Embedding of quantified multimodal logic in 


o. 
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simple type theory 


o. 
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Ref s 
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Source 


Formalization in THF by C. Benzmueller 


~o 


Names 




o. 
o 


Status 






Rating 




o. 
o 


Syntax 




o. 
o 


Comments 




o. 
o 







% declaration of additional base type mu 

thf (mu, type, ( 

mu : $tType ) ) . 



% modal operators not, or, box, Pi (for types mu and $i>$o) 

thf (mnot, definition, 
( mnot 

= ( " [Phi: $i > $o,W: $i] : 
~ ( Phi @ W ) ) ) ) . 



thf (mor, definition, 
( mor 

= ( [Phi: $i > $o,Psi: $i > $o,W: $i] : 
( ( Phi @ W ) 
I ( Psi @ W ) ) ) ) ) . 



thf (mbox, definition, 
( mbox 

= ( A [R: $i>$i> $o,Phi: $i > $o,W: $i] : 
! [V: $i] : 

( ~ ( R @ W @ V ) 

I ( Phi @ v ) ) ) ) ) . 



thf (mall_ind, definition, 
( mall_ind 

= ( ^ [Phi: mu > $i > $o,W: $i] : 
! [X: mu] : 

( Phi @ X @ W ) ) ) ) . 



thf (mall_prop, definition, 
( mall_prop 

= ( " [Phi: ( $i > $o ) > $i > $o,W: $i] 
! [P: $i > $o] : 

( Phi @ P @ W ) ) ) ) . 



% further modal operators 

thf (mtrue, definition, 
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( mtrue 
= ( mall_prop 

@ A [P: $± > $o] : 

( mor @ P @ ( mnot @ P ) ) ) ) ) . 

thf (mtrue, definition, 
( mfalse 
= ( mall_prop 

@ A [P: $i > $o] : 

( mnot @ mtrue ) ) ) ) . 

thf (mand, definition, 
( mand 

= ( A [Phi: $i > $o,Psi: $i > $o] : 

( mnot @ ( mor @ ( mnot @ Phi ) @ ( mnot @ Psi )))))). 

thf (mimpl, definition, 
( mimpl 

= ( A [Phi: $i > $o,Psi: $i > $o] : 

( mor @ ( mnot @ Phi ) @ Psi ) ) ) ) . 

thf (mdia, definition, 
( mdia 

= ( A [R: $i > $i > $o,Phi: $i > $o] : 

( mnot @ ( mbox @ R @ ( mnot @ Phi )))))). 

thf (mexi_ind, definition, 
( mexi_ind 

= ( A [Phi: mu > $i > $o] : 
( mnot 

@ ( mall_ind 
@ A [X: mu] : 

( mnot @ ( Phi @ X ))))))) . 

thf (mexi_prop, definition, 
( mexi_prop 

= ( A [Phi: ( $i > $o ) > $i > $o] : 
( mnot 

@ ( mall_prop 

@ A [P: $i > $o] : 

( mnot @ ( Phi @ P ))))))) . 

% definition of validity 

thf (mvalid, definition, 
( mvalid 

= ( A [Phi: $i > $o] : 
! [W: $i] : 

( Phi @ W ) ) ) ) . 
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B THF Example: In all Worlds exists Truth 









'o 


File 


exl . p 


o. 
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Quantified multimodal logic 




Problems 




'o 


Version 




o. 
o 


English 


In all accessible worlds exists truth. 


o. 
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Ref s 




o. 
o 


Source 


Formalization in THF by C. Benzmueller 


o. 
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Names 




o. 
o 


Status 




o. 
o 


Rating 




o. 
o 


Syntax 




o. 
o 


Comments 




o. 
o 







% include the definitions for qunatified multimodal logic 

include ( ' QML . ax' ) . 



% provide a consant for accesibility relation r 

thf (r, type, r : $i>$i>$o) . 

% conjecture statement 

thf (exl, conjecture, 

(mvalid @ (mbox @ r @ (mexi_prop @ ( A [P : $i>$o ] : P))))). 



22 



C THF Example: Confluence Property of Accessibility Rela- 
tions 



% File 

% Domain 

% Problems 

% Version 

% English 

% Refs 

% Source 

% Names 

% Status 

% Rating 

% Syntax 

% Comments 



ex9 . p 

Quantified multimodal logic 



Confluence property of accessibility relations 
Formalization in THF by C. Benzmueller 



% include the definitions for qunatified multimodal logic 

include ( ' QML . ax' ) . 

% constants for accesibility relations 

thf (i, type, ( 

i: $i > $i > $o )). 



thf ( j , type, ( 

j : $i > $i > $o ) ) 

thf (k,type, ( 

k: $i>$i>$o)) 

thf (1, type, ( 

1: $i>$i>$o)) 



% definition of confluence property 

thf (confluence, definition, 
( confluence 



A [I 
K 

! [A 



( A [I: $i > $i > $o,J: $i > $i > $o, 
$i > $i > $o,L: $i > $i > $o] 
$i,B: $i,C: $i] : 
( ( ( I @ A @ B ) 
& ( K @ A @ C ) ) 
=> ? [D: $i] : 

( ( J @ B @ D ) 
& (L@C@D) ) ) ) )). 



% correspondence between axiom and confluence property 

thf (con j, conjecture, 
( ( mvalid 

@ ( mall_prop 

@ A [P: $i > $o] : 

( mimpl @ ( mdia @ i @ ( mbox @ j @ P ) ) 

@ ( mbox @ k @ ( mdia @ 1 @ P ) ) ) ) ) 
<=> ( confluence @i@j@k@l) )). 



